Describe the bug
New users created for PBA's via AutoNewWindowsUser get picked up by mimikatz. This means that either user traces are left somewhere in credetial caches or the user isn't properly deleted. Either way this results in a ton of useless credentials added to configuration.
To Reproduce
Steps to reproduce the behavior:
- Run monkey multiple times with PBA's enabled on windows
- Check config - a lot of bogus users got added
Expected behavior
Users created by monkey should be removed without leaving traces OR shouldn't be added to config
Tasks
Describe the bug
New users created for PBA's via
AutoNewWindowsUserget picked up by mimikatz. This means that either user traces are left somewhere in credetial caches or the user isn't properly deleted. Either way this results in a ton of useless credentials added to configuration.To Reproduce
Steps to reproduce the behavior:
Expected behavior
Users created by monkey should be removed without leaving traces OR shouldn't be added to config
Tasks